Skip to content
OpenAdvisories
High WID-SEC-2025-2161 5 CVEs

D-LINK Router: Mehrere Schwachstellen

Published Sep 29, 2025 · Updated Sep 29, 2025 · de-DE

Vendor: D-Link Product: Router

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in D-LINK Router ausnutzen, um beliebigen Programmcode auszuführen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 5

  • High 7.5
    CVE-2025-57637

    Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the jhttpd service in the via…

  • High 7.3
    CVE-2025-10444

    Campcodes Online Job Finder System advancesearch.php sql injection

    A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be c…

    Campcodes Online Job Finder System
  • Medium 6.5
    CVE-2025-57636

    OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command inject…

  • Medium 6.3
    CVE-2025-10440 EPSS 13%

    D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection

    A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub_4621DC of the file usb_paswd.asp of the component jhttpd. The manipulation…

    D-Link DI-8100 DI-8003 DI-8200G Network devices
  • Medium 6.3
    CVE-2025-10441 EPSS 13%

    D-Link DI-8100G/DI-8200G/DI-8003G jhttpd version_upgrade.asp sub_433F7C os command injection

    A vulnerability was found in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub_433F7C of the file version_upgrade.asp of the component jhttpd. The manipulation of the argument path results in os command i…

    D-Link DI-8200G DI-8003G DI-8100G Network devices

Revision history

  1. #1

    Initiale Fassung

References